Threat Intelligence Exfiltration and Rule Enumeration

Detects attempts to extract threat intelligence, enumerate detection rules, or exfiltrate security configuration details from the agent. Attackers attempt to learn the detection ruleset to craft evasion payloads, or extract security audit logic to reverse-engineer defense mechanisms.

Response Actions

References